Privacy policy

What SpendOS is

SpendOS is a personal expense tracker with optional receipt scanning, voice entry and cost splitting with friends. This policy explains what we collect, why, and the choices you have.

Information we collect

• Account: email address, password (stored hashed), name, home currency, optional phone number, time zone and profile photo.
• Your finances: expenses, income, budgets, goals, payment accounts, trips and notes you enter, and receipt photos you choose to keep.
• Split groups: groups you create or join, the names of people in them, shared expenses and invites (including the email or phone number you invite).
• Device information: app version, device model, operating system, language and time zone, to keep the service working and fix problems. We don’t collect your device name, contacts or location.

Receipt scanning and voice notes

When you scan a receipt or turn a note into expenses, the photo or text is sent to our AI provider (OpenAI) only to extract the details for you. We send it with storage turned off; OpenAI doesn’t use it to train models and may keep it for up to 30 days only to detect abuse. Voice notes are turned into text by your phone’s built-in speech recognition (Apple or Google); SpendOS never receives the audio.

How we use it

Only to provide SpendOS: syncing your data across your devices and the web, sending sign-in and password-reset codes, delivering invites and notifications you ask for, and keeping the service secure. We don’t sell your data, show ads or share it with advertisers.

Where it’s stored and how it’s protected

Your data is stored on our own servers and transferred over encrypted connections (HTTPS). Each account can only read its own data; split group data is visible only to members of that group. Data saved on your phone stays on your phone until it syncs.

Your choices

• Edit or delete any entry at any time, and export your expenses as a file.
• Delete your account in the app (Profile → Delete account) or at spendos.edgelesssolutions.com/delete-account. Deletion is immediate; server backups are kept for 14 days and then deleted.
• Camera, photos, microphone and notifications are only used if you allow them, and you can turn them off in your device settings.

Children

SpendOS isn’t directed to children under 13, and we don’t knowingly collect their data.

Contact

Questions or requests: spendos@edgelesssolutions.com. If we change this policy, we’ll update the date above and tell you in the app for significant changes.